Skip to content
OpenAdvisories

Vendor

SCADA-LTS

5 known vulnerabilities.

Products

Scada-LTS 3 ScadaLTS 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-84859

    Scada-LTS Authenticated Blind SQL Injection

    ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injection The /api/events/search endpoint accepts a JSON body containing a sortBy array. The values in this array are concatenated directly into the SQL ORDER BY clause without…

    SCADA-LTS Scada-LTS
  • Medium 6.1
    CVE-2026-19657

    ScadaLTS Unauthenticated Reflected XSS

    ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session.

    SCADA-LTS ScadaLTS